Archive
26 April 2006
Vulnerabilities first published on this day (UTC), newest first.
43 results · Feed
-
Unscored —
resmgr in SUSE CORE 9 does not properly identify terminal names, which allows local users to spoof terminals and login …
-
Unscored —
Multiple untrusted search path vulnerabilities in SUSE Linux 9.3 and 10.0, and possibly other distributions, cause the …
-
Unscored —
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, does not properly enforce class-specific exclude ru…
-
Unscored —
Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LD_LIBRARY…
-
Unscored —
resmgr in SUSE Linux 9.2 and 9.3, and possibly other distributions, allows local users to bypass access control rules f…
-
Unscored —CVE-2006-2052 Public exploit
Cross-site scripting (XSS) vulnerability in Verosky Media Instant Photo Gallery allows remote attackers to inject arbit…
-
Unscored —CVE-2006-2051 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in myadmin/index.php in NextAge Shopping Cart allow remote attacker…
-
Unscored —
Argument injection vulnerability in Mozilla Firefox 1.0.6 allows user-assisted remote attackers to modify command line …
-
Unscored —
Cross-site scripting (XSS) vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to inject …
-
Unscored —
Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allows remote attackers to obtain sensitive information …
-
Unscored —
na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has a default username of admin and a default password of admin.
-
Unscored —
Argument injection vulnerability in Avant Browser 10.1 Build 17 allows user-assisted remote attackers to modify command…
-
Unscored —
Multiple SQL injection vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "Full Version",…
-
Unscored —
3Com Baseline Switch 2848-SFP Plus Model #3C16486 with firmware before 1.0.2.0 allows remote attackers to cause a denia…
-
Unscored —
SQL injection vulnerability in dcboard.cgi in DCScripts DCForumLite 3.0 allows remote attackers to execute arbitrary SQ…
-
Unscored —
The (1) shadow password file in na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 has world readable permissions, w…
-
Unscored —CVE-2006-2043 Public exploit
na-img-4.0.34.bin for the IP3 Networks NetAccess NA75 allows local users to gain Unix shell access via "`" (backtick) c…
-
Unscored —
Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2006-2056 EPSS 13%
Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to mod…
-
Unscored —CVE-2006-2048 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Edwin van Wijk phpWebFTP 2.3 allow remote attackers…
-
Unscored —CVE-2006-2055 EPSS 15%
Argument injection vulnerability in Microsoft Outlook 2003 SP1 allows user-assisted remote attackers to modify command …
-
Unscored —CVE-2006-2061 Public exploit
SQL injection vulnerability in lib/func_taskmanager.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 a…
-
Unscored —CVE-2006-2046 Public exploit
Multiple SQL injection vulnerabilities in Application Dynamics Cartweaver ColdFusion 2.16.11 and earlier allow remote a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Leadhound Full and LITE 2.1, and probably the Network Version "F…
-
Unscored —
Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board (IPB) 2.1.x and 2.0.x be…
-
Unscored —CVE-2006-2059 Public exploit
action_public/search.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote attackers to execu…
-
Unscored —CVE-2006-1864 Public exploit
Directory traversal vulnerability in smbfs in Linux 2.6.16 and earlier allows local users to escape chroot restrictions…
-
Unscored —
Multiple SQL injection vulnerabilities in the osTicket module in Help Center Live before 2.1.0 allow remote attackers t…
-
Unscored —
PhpWebGallery before 1.6.0RC1 allows remote attackers to obtain arbitrary pictures via a request to picture.php without…
-
Unscored —CVE-2006-2037 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Thwboard 3.0 Beta 2.84 allows remote attackers to inject arbit…
-
Unscored —
Multiple SQL injection vulnerabilities in ampleShop 2.1 and earlier allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2006-2040 Public exploit
Multiple SQL injection vulnerabilities in photokorn 1.53 and 1.542 allow remote attackers to execute arbitrary SQL comm…
-
Unscored —
Francesco Stablum tcpick 0.2.1 allows remote attackers to cause a denial of service (segmentation fault) via certain fr…
-
Unscored —
Websense, when configured to permit access to the dynamic content category, allows local users to bypass intended block…
-
Unscored —CVE-2006-2027 Public exploit
Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server…
-
Unscored —CVE-2006-2032 Public exploit
Multiple SQL injection vulnerabilities in Core CoreNews 2.0.1 and earlier allow remote attackers to execute arbitrary S…
-
Unscored —CVE-2006-2028 Public exploit
Cross-site scripting (XSS) vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote at…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows r…
-
Unscored —
The Allied Telesyn AT-9724TS switch allows remote attackers to cause a denial of service via a large amount of UDP data…
-
Unscored —CVE-2006-2029 Public exploit
Multiple SQL injection vulnerabilities in Jeremy Ashcraft Simplog 0.9.3 and earlier allow remote attackers to execute a…